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What is claimed is: 

1. A method for controlling an information processing apparatus comprising: 

security hardware for storing security key information so that it can be freely read 
and written; 

OS start admission means for determining whether or not input data for user 
certification is valid when an OS starts based on said security key information read from 
said security hardware and admitting the OS to start if the determination result is positive; 

security key information restoration means for restoring the security key information 
in the security hardware based on predetermined data for restoration; 

OS start type selection means for selecting and executing either a first type OS start 
for generating a system status in which said security key information restoration means is 
operable (hereafter, referred to as a "first system status") and operating said OS start 
admission means or a functionally restricted second type OS start for generating a 
functionally restricted system status in which said security key information restoration 
means is inoperable (hereafter, referred to as a "second system status") and not operating 
said OS start admission means, and said method causing a computer to execute: 

a cancellation step in which cancellation means cancels the operation of said OS 
start admission means as to the first type OS start after it is generated; and 



-29- 



JP920030014US2 



a cancel release step in which cancel release means releases the cancellation of the 
operation of said OS start admission means by said cancellation means after the first type 
OS start having the operation of said OS start admission means canceled by said 
cancellation means is executed at least once. 

2. The method for controlling an information processing apparatus according to Claim 
1, wherein the input data for user certification is the data keyed in by the user on the first 
type OS start. 

3. The method for controlling an information processing apparatus according to Claim 
1, wherein said data for restoration is generated on generating the security key information 
in the security hardware so as to render the security key information freely restorable and 
is stored in an auxiliary storage. 

4. The method for controlling an information processing apparatus according to Claim 
1, wherein the first and second type OS starts are the starts based on the same OS stored 
in the same auxiliary storage, and when starting the OS, said OS start type selection means 
detects whether or not a predetermined user operation is performed so as to select and 
execute the first type OS start in the case of "no" and the second type OS start in the case 
of "yes" respectively. 

5. The method for controlling an information processing apparatus according to Claim 
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1, wherein the first and second type OS starts are the starts based on the OSes stored in 
different auxiliary storage respectively, and when said second OS is readable from the 
auxiliary storage storing said second OS, said OS start type selection means selects and 
executes the second type OS start in preference to the first type OS start. 

6. The method for controlling an information processing apparatus according to Claim 
1, wherein there is an erasure step of having said cancel release means erased by erasure 
means after said cancel release means releases the cancellation of the operation of said OS 
start admission means by said cancellation means. 

7. The method for controlling an information processing apparatus according to Claim 6, 
wherein there is a step of having said erasure means generated by said cancel release 
means. 

8. A service enabling the control of an information processing apparatus having 
security hardware for storing security key informatin so that it can be freely read and 
written comprising: 

OS start admission means for determining whether or not input data for user 
certification is valid when an OS starts based on said security key information read from 
said security hardware and admitting the OS to start if the determination result is positive; 

security key information restoration means for restoring the security key information 
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in the security hardware based on predetermined data for restoration; 

OS start type selection means for selecting and executing either a first type OS start 
for generating a system status in which said security key information restoration means is 
operable (hereafter, referred to as a "first system status") and operating said OS start 
admission means or a functionally restricted second type OS start for generating a 
functionally restricted system status in which said security key information restoration 
means is inoperable (hereafter, referred to as a "second system status") and not operating 
said OS start admission means, and said method causing a computer to execute: 

a cancellation step in which cancellation means cancels the operation of said OS 
start admission means as to the first type OS start after it is generated; and 

a cancel release step in which cancel release means releases the cancellation of the 
operation of said OS start admission means by said cancellation means after the first type 
OS start having the operation of said OS start admission means canceled by said 
cancellation means is executed at least once. 

9. The service enabling the control of an information processing apparatus according to 
Claim 8, wherein the input data for user certification is the data keyed in by the user on the 
first type OS start. 

10. The service enabling the control of an information processing apparatus according to 
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Claim 8, wherein said data for restoration is generated on generating the security key 
information in the security hardware so as to render the security key information freely 
restorable and is stored in an auxiliary storage. 

11. The service enabling the control of an information processing apparatus according to 
Claim 8, wherein the first and second type OS starts are the starts based on the same OS 
stored in the same auxiliary storage, and when starting the OS, said OS start type selection 
means detects whether or not a predetermined user operation is performed so as to select 
and execute the first type OS start in the case of "no" and the second type OS start in the 
case of "yes" respectively. 

12. The service enabling the control of an information processing apparatus according to 
Claim 8, wherein the first and second type OS starts are the starts based on the OSes 
stored in different auxiliary storage respectively, and when said second OS is readable from 
the auxiliary storage storing said second OS, said OS start type selection means selects and 
executes the second type OS start in preference to the first type OS start. 

13. The service enabling the control of an information processing apparatus according to 
Claim 8, wherein there is an erasure step of having said cancel release means erased by 
erasure means after said cancel release means releases the cancellation of the operation of 
said OS start admission means by said cancellation means. 

14. The service enabling the control of an information processing apparatus according to 
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Claim 13, wherein there is a step of having said erasure means generated by said cancel 
release means. 

15. A computer program for controlling an information processing apparatus having . 
security hardware for storing security key information which can be freely read and written 
comprising: 

OS start admission means for determining whether or not input data for user 
certification is valid when an OS starts based on said security key information read from 
said security hardware and admitting the OS to start if the determination result is positive; 

security key information restoration means for restoring the security key information 
in the security hardware based on predetermined data for restoration; 

OS start type selection means for selecting and executing either a first type OS start 
for generating a system status in which said security key information restoration means is 
operable (hereafter, referred to as a "first system status") and operating said OS start 
admission means or a functionally restricted second type OS start for generating a 
functionally restricted system status in which said security key information restoration 
means is inoperable (hereafter, referred to as a "second system status") and not operating 
said OS start admission means, and said method causing a computer to execute: 

a cancellation step in which cancellation means cancels the operation of said OS 
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start admission means as to the first type OS start after it is generated; and 

a cancel release step in which cancel release means releases the cancellation of the 
operation of said OS start admission means by said cancellation means after the first type 
OS start having the operation of said OS start admission means canceled by said 
cancellation means is executed at least once. 

16. The computer program for controlling an information processing apparatus 
according to Claim 15, wherein the input data for user certification is the data keyed in by 
the user on the first type OS start. 

17. The computer program for controlling an information processing apparatus 
according to Claim 15, wherein said data for restoration is generated on generating the 
security key information in the security hardware so as to render the security key 
information freely restorable and is stored in an auxiliary storage. 

18. The computer program for controlling an information processing apparatus 
according to Claim 15, wherein the first and second type OS starts are the starts based on 
the same OS stored in the same auxiliary storage, and when starting the OS, said OS start 
type selection means detects whether or not a predetermined user operation is performed 
so as to select and execute the first type OS start in the case of "no" and the second type 
OS start in the case of "yes" respectively. 
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19. The computer program for controlling an information processing apparatus 
according to Claim 15, wherein the first and second type OS starts are the starts based on 
the OSes stored in different auxiliary storage respectively, and when said second OS is 
readable from the auxiliary storage storing said second OS, said OS start type selection 
means selects and executes the second type OS start in preference to the first type OS 
start. 

20. The computer program for controlling an information processing apparatus 
according to Claim 15, wherein there is an erasure step of having said cancel release 
means erased by erasure means after said cancel release means releases the cancellation 
of the operation of said OS start admission means by said cancellation means. 

21. The computer program for controlling an information processing apparatus according 
to Claim 20, wherein there is a step of having said erasure means generated by said cancel 
release means. 
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